Security update for libvorbis
This update for libvorbis fixes the following issues:
- CVE-2017-14633: out-of-bounds array read vulnerability exists in
function mapping0_forward() could lead to remote denial of service (bsc#1059811)
- CVE-2017-14632: Remote Code Execution upon freeing uninitialized
memory in function vorbis_analysis_headerout(bsc#1059809)
This update was imported from the SUSE:SLE-12:Update update project.
- Submitted by Takashi Iwai (tiwai)
Fixed bugs
bnc#1059809
VUL-0: CVE-2017-14632: libvorbis: Remote Code Execution upon freeing uninitialized memory in function vorbis_analysis_headerout()
bnc#1059811
VUL-0: CVE-2017-14633: libvorbis: out-of-bounds array read vulnerability exists in function mapping0_forward()